Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/JEMgZMqCppytL-XPExNRul1VH3s.roa
File: JEMgZMqCppytL-XPExNRul1VH3s.roa (raw, json)
Hash identifier: dzjcBpIe+vXzor5NRw+072k/UWw88Cy8QHFD8Z2ohp8=
Subject key identifier: 24:43:20:64:CA:82:A6:9C:AD:2F:E5:CF:13:13:51:BA:5D:55:1F:7B
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019D7241112355DFD54E9703CDC92B35AB66
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/JEMgZMqCppytL-XPExNRul1VH3s.roa
Signing time: Thu 09 Apr 2026 12:39:20 +0000
ROA not before: Thu 09 Apr 2026 12:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.110.4.0/22 maxlen: 22
94.231.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:41:11:23:55:df:d5:4e:97:03:cd:c9:2b:35:ab:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Apr 9 12:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24432064ca82a69cad2fe5cf131351ba5d551f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:09:93:43:2f:32:94:a2:2a:8a:ff:3a:96:
3a:97:6b:bf:e2:43:97:ac:5d:9e:98:c6:1f:37:b2:
1c:62:24:d0:56:f7:13:f6:11:b2:50:de:1f:e1:36:
1f:8b:64:05:fa:67:1b:2b:56:2d:5d:00:28:73:3f:
12:5a:9e:d1:d0:f8:09:f4:ef:ee:5c:4f:43:f3:84:
e8:5b:d2:45:82:4c:6b:6a:67:39:18:35:fe:af:c2:
66:90:fb:ec:71:26:14:b2:5b:65:1f:3c:b9:16:8c:
c0:33:41:8d:ec:02:d7:dc:8e:17:e3:07:11:bc:fe:
7c:52:de:c7:ee:ef:74:d2:9b:67:15:98:74:82:11:
f2:21:19:24:44:1a:d9:7a:5b:c9:63:08:f3:94:2a:
f9:1c:5a:7d:77:8c:2e:03:b0:94:5f:57:7e:90:40:
75:81:38:e9:5b:b1:75:20:9e:85:5d:c6:c9:69:ed:
7f:3e:a1:34:25:4f:af:95:3a:fe:c0:b3:b1:3f:af:
95:03:c8:ba:23:f5:8b:34:b9:77:7f:38:bb:40:d5:
fc:96:f3:90:ff:d7:79:d5:c6:89:c3:cf:43:db:1a:
ac:72:7a:65:0e:fe:4d:f9:81:11:5a:c0:50:57:63:
b6:40:ca:47:d1:ce:ff:94:3a:f2:e0:e5:bd:cc:e2:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:20:64:CA:82:A6:9C:AD:2F:E5:CF:13:13:51:BA:5D:55:1F:7B
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/JEMgZMqCppytL-XPExNRul1VH3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.4.0/22
94.231.232.0/21
Signature Algorithm: sha256WithRSAEncryption
22:63:db:52:2a:60:16:3e:65:2c:9b:ff:24:cb:ca:f2:7d:6d:
c7:48:47:b8:3a:c7:3a:64:39:9c:6c:3e:7f:d2:63:56:73:80:
1a:50:c1:89:c0:b2:95:51:28:57:91:45:10:01:39:1e:5b:90:
15:c7:f3:f7:87:78:66:a0:46:79:c1:05:f6:af:5b:96:14:57:
f6:86:f1:fd:49:89:dc:0c:e9:f9:0e:f7:9f:bd:59:8d:f3:19:
97:a6:f7:2b:ea:8e:7e:f2:c7:74:a3:9a:2c:b3:24:10:7a:5c:
4c:78:b7:21:67:ee:1a:ed:90:12:c1:74:75:7f:8c:e9:17:93:
3f:5e:8a:6c:14:51:7d:16:81:29:c3:ef:6d:d7:c0:0e:c1:ff:
ae:75:9a:e2:8f:90:2b:ad:ec:23:45:4b:8b:04:53:74:9b:72:
42:5a:0a:b5:a1:d3:f8:7e:14:bb:b6:17:e3:8d:ec:d2:30:88:
a8:13:4e:26:a6:0d:b2:40:97:44:ab:95:50:2b:7d:a0:53:9c:
d4:cc:ff:1d:be:11:b1:65:e3:84:38:0e:38:85:ea:70:9d:b1:
48:93:fa:12:68:b5:9c:1b:e4:b7:fb:6b:2c:72:b8:20:c8:4e:
e0:be:57:18:c0:61:7a:bd:ff:02:44:35:b3:b4:81:8c:8d:4c:
86:6d:04:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:31 2026 by rpki-client